At least they've stopped running "rm -rf /" on user machines (https://github.com/valvesoftware/steam-for-linux/issues/3671). So it's a step in the right direction.